seal_crypto_wrapper::algorithms::kdf::key

Enum KdfKeyAlgorithm

pub enum KdfKeyAlgorithm {
    Hkdf(HashAlgorithm),
}

Expand description

Key-based Key Derivation Function algorithm enumeration.

基于密钥的密钥派生函数算法枚举。

§Algorithm Selection | 算法选择

Choose the hash function based on your security requirements:

HKDF-SHA256: Standard choice, good performance, 128-bit security
HKDF-SHA384: Higher security margin, 192-bit security
HKDF-SHA512: Maximum security, 256-bit security

根据您的安全要求选择哈希函数：

HKDF-SHA256: 标准选择，良好性能，128 位安全性
HKDF-SHA384: 更高安全边际，192 位安全性
HKDF-SHA512: 最大安全性，256 位安全性

Variants§

§

Hkdf(HashAlgorithm)

HMAC-based Key Derivation Function with configurable hash algorithm.

具有可配置哈希算法的基于 HMAC 的密钥派生函数。

§Properties | 属性

Standard: RFC 5869
Type: Extract-and-Expand KDF
Security: Based on HMAC security
Performance: High (depends on hash function)

§Features | 特性

Salt Support: Optional salt for key separation
Context Information: Application-specific context data
Variable Output: Any desired output length
Deterministic: Same inputs always produce same output
盐支持: 用于密钥分离的可选盐
上下文信息: 应用特定的上下文数据
可变输出: 任何所需的输出长度
确定性: 相同输入总是产生相同输出

Implementations§

Source §

impl KdfKeyAlgorithm

Source

pub fn into_wrapper(self) -> KdfKeyWrapper

Converts the algorithm enum into a concrete wrapper implementation.

将算法枚举转换为具体的包装器实现。

§Purpose | 目的

This method creates a wrapper that implements the key-based KDF algorithm trait, enabling actual cryptographic operations like key derivation from high-entropy input material with type safety guarantees.

此方法创建一个实现基于密钥的 KDF 算法 trait 的包装器，启用实际的密码操作，如从高熵输入材料派生密钥，并提供类型安全保证。

§Returns | 返回值

A KdfKeyWrapper that can perform:

Key derivation from high-entropy input
Salt-based key separation
Context-aware key derivation
Variable-length output generation

可以执行以下操作的 KdfKeyWrapper：

从高熵输入派生密钥
基于盐的密钥分离
上下文感知的密钥派生
可变长度输出生成

§Examples | 示例

use seal_crypto_wrapper::algorithms::kdf::key::KdfKeyAlgorithm;

let algorithm = KdfKeyAlgorithm::build().hkdf_sha256();
let kdf = algorithm.into_wrapper();

// Derive multiple keys from a master key
let master_key = b"high-entropy-master-key-32-bytes";
let salt = Some(b"application-salt".as_slice());

// Derive encryption key
let enc_key = kdf.derive(
    master_key,
    salt,
    Some(b"encryption"),
    32
)?;

// Derive MAC key
let mac_key = kdf.derive(
    master_key,
    salt,
    Some(b"authentication"),
    32
)?;

// Keys are different due to different context
assert_ne!(enc_key, mac_key);